[chore] Enable S256 code challenge (#2224)

For some reason we only had plain enabled. This adds S256.
superseriousbusiness · Sep 28, 2023 · 2a9927d · 2a9927d
1 parent e93cc7a
commit 2a9927d
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/internal/oauth/server.go b/internal/oauth/server.go
@@ -99,7 +99,10 @@ func New(ctx context.Context, database db.Basic) Server {
 			oauth2.AuthorizationCode,
 			oauth2.ClientCredentials,
 		},
-		AllowedCodeChallengeMethods: []oauth2.CodeChallengeMethod{oauth2.CodeChallengePlain},
+		AllowedCodeChallengeMethods: []oauth2.CodeChallengeMethod{
+			oauth2.CodeChallengePlain,
+			oauth2.CodeChallengeS256,
+		},
 	}
 
 	srv := server.NewServer(sc, manager)